Today's enterprise applications reside on both the network and in the cloud. These applications can be either productive business solutions or counterproductive-and often dangerous-diversions. Critical applications need bandwidth prioritization, while social media and gaming applications need to be bandwidth throttled or even completely blocked. Traditional stateful packet inspection firewalls only scan for ports and protocols-not applications-so they cannot tell the good applications from the bad.